Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/13/34352e31332e35382e302f32342d3234203d3e203430363736.roa
File:                     34352e31332e35382e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier:          D2G7U3JAyXJLmuRXoI8t7i7HzunuY8F3WVglQPjrAyM=
Subject key identifier:   36:50:53:02:49:F5:69:10:BF:7E:04:49:B7:3A:36:01:E4:4F:4D:25
Certificate issuer:       /CN=8000e2f09d2bdd9bee9d4694e4779bca485a6067
Certificate serial:       66D7103C48961EF0F6FB6CD368645985D75B6A9E
Authority key identifier: 80:00:E2:F0:9D:2B:DD:9B:EE:9D:46:94:E4:77:9B:CA:48:5A:60:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gADi8J0r3ZvunUaU5HebykhaYGc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/13/34352e31332e35382e302f32342d3234203d3e203430363736.roa
Signing time:             Sat 28 Nov 2020 12:46:36 +0000
ROA not before:           Sat 28 Nov 2020 12:41:36 +0000
ROA not after:            Sat 27 Nov 2021 12:46:36 +0000
asID:                     40676
IP address blocks:        45.13.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d7:10:3c:48:96:1e:f0:f6:fb:6c:d3:68:64:59:85:d7:5b:6a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8000e2f09d2bdd9bee9d4694e4779bca485a6067
        Validity
            Not Before: Nov 28 12:41:36 2020 GMT
            Not After : Nov 27 12:46:36 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a2:bf:0a:eb:98:fc:50:74:2f:7a:ee:80:da:
                    5e:ca:6d:2a:d9:b5:2b:6d:33:d7:fc:5c:5f:ef:0c:
                    01:57:03:27:be:fd:b9:14:ed:1f:93:89:a9:ce:91:
                    7b:ff:b1:77:33:21:f3:aa:3e:93:8e:c3:40:92:7f:
                    3d:c1:a5:9d:b4:b9:c8:cf:e8:6c:ec:32:e8:6f:e5:
                    61:f2:3b:96:52:79:6e:0f:d7:59:18:09:1c:d7:ac:
                    dd:61:c8:74:00:45:c9:86:8e:0a:4f:7f:27:8c:f9:
                    de:25:e9:94:8d:57:29:3e:70:42:d7:52:8f:a2:e3:
                    f4:44:c0:17:5d:39:78:23:53:93:df:15:95:8e:81:
                    a5:d2:d7:9a:ec:2e:c9:b3:b8:b3:90:d9:b6:21:e1:
                    54:c4:03:fc:76:7f:fb:e6:90:00:7d:e9:de:ac:42:
                    17:3b:2b:98:e6:f3:23:ad:98:0e:07:84:42:3c:78:
                    6a:3c:c7:a9:0b:4b:ea:2d:78:4e:60:2a:09:73:ad:
                    90:c1:7d:e3:c4:53:c3:f2:ea:43:c8:c9:41:d8:88:
                    a4:8d:14:de:de:c1:69:ae:72:64:16:ff:7b:06:d1:
                    a6:5b:fd:ac:bb:e2:8d:c5:a9:e3:0b:38:25:73:c8:
                    5b:1f:6f:e1:d4:11:09:b4:40:c7:61:e5:91:65:7c:
                    1a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:50:53:02:49:F5:69:10:BF:7E:04:49:B7:3A:36:01:E4:4F:4D:25
            X509v3 Authority Key Identifier:
                keyid:80:00:E2:F0:9D:2B:DD:9B:EE:9D:46:94:E4:77:9B:CA:48:5A:60:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/13/8000E2F09D2BDD9BEE9D4694E4779BCA485A6067.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gADi8J0r3ZvunUaU5HebykhaYGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/13/34352e31332e35382e302f32342d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:56:18:73:fa:6a:80:a5:29:b3:81:1c:40:cf:cb:71:20:6e:
         5c:8b:8d:4f:3a:24:c6:b1:ae:f2:29:f9:41:9a:ec:2c:d2:ae:
         38:c4:c2:3e:c7:43:33:91:06:75:9a:4c:ea:6d:79:31:ca:94:
         67:18:c8:12:24:85:90:08:6c:84:1d:74:9a:7e:68:99:c1:25:
         4e:26:94:05:f0:17:10:c1:65:af:3d:90:f1:b2:ba:78:bd:9b:
         1c:00:c3:5b:05:68:62:5a:11:0d:dc:e9:90:5d:91:08:34:fa:
         52:21:4f:df:69:9f:0c:ee:68:62:8a:64:86:39:eb:70:e8:f3:
         c9:e9:9f:99:29:e4:39:3e:81:5c:4c:99:5e:b3:56:93:aa:34:
         f5:00:11:37:12:1c:64:58:8a:da:7b:c7:44:c0:67:cd:cd:0a:
         3f:fb:6e:39:44:0d:5f:dc:bd:a3:eb:58:19:b2:5f:47:6b:25:
         06:72:42:e7:f2:85:18:5c:66:72:78:c4:20:30:99:6d:5d:ae:
         f5:f8:8e:de:a9:a3:27:8a:08:e9:d8:9d:60:2b:e8:2b:23:40:
         f0:0f:d3:31:f6:3d:db:b6:19:31:4c:35:05:4f:4e:2b:d3:a2:
         08:2f:2a:db:09:c0:c8:9e:14:a0:a2:93:37:7d:d3:a9:51:d1:
         58:ae:ae:2d
-----BEGIN CERTIFICATE-----
MIIG4TCCBcmgAwIBAgIUZtcQPEiWHvD2+2zTaGRZhddbap4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODAwMGUyZjA5ZDJiZGQ5YmVlOWQ0Njk0ZTQ3NzliY2E0
ODVhNjA2NzAeFw0yMDExMjgxMjQxMzZaFw0yMTExMjcxMjQ2MzZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTBBMkJGMEFFQjk4RkM1MDc0
MkY3QUVFODBEQTVFQ0E2RDJBRDlCNTJCNkQzM0Q3RkM1QzVGRUYwQzAxNTcwMzI3
QkVGREI5MTRFRDFGOTM4OUE5Q0U5MTdCRkZCMTc3MzMyMUYzQUEzRTkzOEVDMzQw
OTI3RjNEQzFBNTlEQjRCOUM4Q0ZFODZDRUMzMkU4NkZFNTYxRjIzQjk2NTI3OTZF
MEZENzU5MTgwOTFDRDdBQ0RENjFDODc0MDA0NUM5ODY4RTBBNEY3RjI3OENGOURF
MjVFOTk0OEQ1NzI5M0U3MDQyRDc1MjhGQTJFM0Y0NDRDMDE3NUQzOTc4MjM1Mzkz
REYxNTk1OEU4MUE1RDJENzlBRUMyRUM5QjNCOEIzOTBEOUI2MjFFMTU0QzQwM0ZD
NzY3RkZCRTY5MDAwN0RFOURFQUM0MjE3M0IyQjk4RTZGMzIzQUQ5ODBFMDc4NDQy
M0M3ODZBM0NDN0E5MEI0QkVBMkQ3ODRFNjAyQTA5NzNBRDkwQzE3REUzQzQ1M0Mz
RjJFQTQzQzhDOTQxRDg4OEE0OEQxNERFREVDMTY5QUU3MjY0MTZGRjdCMDZEMUE2
NUJGREFDQkJFMjhEQzVBOUUzMEIzODI1NzNDODVCMUY2RkUxRDQxMTA5QjQ0MEM3
NjFFNTkxNjU3QzFBMTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAkKK/CuuY/FB0L3rugNpeym0q2bUrbTPX/Fxf7wwBVwMnvv25FO0f
k4mpzpF7/7F3MyHzqj6TjsNAkn89waWdtLnIz+hs7DLob+Vh8juWUnluD9dZGAkc
16zdYch0AEXJho4KT38njPneJemUjVcpPnBC11KPouP0RMAXXTl4I1OT3xWVjoGl
0tea7C7Js7izkNm2IeFUxAP8dn/75pAAfenerEIXOyuY5vMjrZgOB4RCPHhqPMep
C0vqLXhOYCoJc62QwX3jxFPD8upDyMlB2IikjRTe3sFprnJkFv97BtGmW/2su+KN
xanjCzglc8hbH2/h1BEJtEDHYeWRZXwaEQIDAQABo4IB7zCCAeswHQYDVR0OBBYE
FDZQUwJJ9WkQv34ESbc6NgHkT00lMB8GA1UdIwQYMBaAFIAA4vCdK92b7p1GlOR3
m8pIWmBnMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMy84MDAw
RTJGMDlEMkJERDlCRUU5RDQ2OTRFNDc3OUJDQTQ4NUE2MDY3LmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0FEaThKMHIzWnZ1blVhVTVIZWJ5a2hhWUdjLmNlcjCB
hQYIKwYBBQUHAQsEeTB3MHUGCCsGAQUFBzALhmlyc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMy8zNDM1MmUzMTMzMmUzNTM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDM2MzczNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0N
OjANBgkqhkiG9w0BAQsFAAOCAQEABFYYc/pqgKUps4EcQM/LcSBuXIuNTzokxrGu
8in5QZrsLNKuOMTCPsdDM5EGdZpM6m15McqUZxjIEiSFkAhshB10mn5omcElTiaU
BfAXEMFlrz2Q8bK6eL2bHADDWwVoYloRDdzpkF2RCDT6UiFP32mfDO5oYopkhjnr
cOjzyemfmSnkOT6BXEyZXrNWk6o09QARNxIcZFiK2nvHRMBnzc0KP/tuOUQNX9y9
o+tYGbJfR2slBnJC5/KFGFxmcnjEIDCZbV2u9fiO3qmjJ4oI6didYCvoKyNA8A/T
MfY927YZMUw1BU9OK9OiCC8q2wnAyJ4UoKKTN33TqVHRWK6uLQ==
-----END CERTIFICATE-----